Feature request: ability to block based upon TCP SYN rate

[cdanis]

It would be great if we were able to set an attack detection threshold based upon TCP SYN pps.

It'd be even better if we were also able to dump out the source IPs or subnets that were over the threshold and automatically create flowspec rules or similar, but of course that seems much harder.

[pavel-odintsov]

Hello!

Thank you for idea! I'll tag it as new feature.

[pavel-odintsov]

We have this option in Advanced version: https://fastnetmon.com/docs-fnm-advanced/fastnetmon-threshold-types/

At some point we may add it in Community one too.